A security team has implemented an access policy on BIG-IP APM to restrict access to a sensitive application to only employees in the finance department. How can they validate that the control is working correctly?

Attempt to access the application with a user from a different department and verify access is denied

Check the APM logs for successful and failed access attempts

Review the access policy configuration to ensure the correct groups are listed

Confirm that the access policy is assigned to the virtual server

After implementing a new WAF policy to block SQL injection attempts, a security analyst wants to verify that the control is actually working. Which action would provide the most reliable validation?

Confirm that the WAF is in blocking mode

Send a known SQL injection payload to the application and verify it is blocked

Review the WAF logs for blocked requests

Check that the WAF policy is assigned to the virtual server

A company must encrypt all traffic between clients and its web servers. Which F5 control is designed for this purpose?

SSL/TLS offloading and re-encryption

A retail company processes credit card transactions and must comply with PCI DSS. Which F5 capability is most directly required to meet PCI DSS logging requirements?

High-speed logging (HSL) to a central log server

iRules for traffic manipulation

SNAT for source address translation

A healthcare organization must protect electronic protected health information (ePHI) as required by HIPAA. Which F5 control is most directly aligned with this requirement?

SSL/TLS offloading and re-encryption

F5Certified Solution Expert, Security

Domain 2Objective 2

2.02 Determine the Correct Control to Address a Compliance or Business Requirement 401 Practice Questions (Page 3)

Part of the ARCHITECT SOLUTIONS domain, which makes up ~28% of our current practice bank. F5 does not publish an official question count, but from its 105-minute exam (~40–70 total, ~11–20 in this domain), expect 2–4 from this objective — we provide 20 practice questions to prepare you well beyond it. (estimate)

20questions here

4free pages

4concepts

Questions 11–15

11application · medium
A security team has implemented an access policy on BIG-IP APM to restrict access to a sensitive application to only employees in the finance department. How can they validate that the control is working correctly?
Select an answer first
12application · medium
After implementing a new WAF policy to block SQL injection attempts, a security analyst wants to verify that the control is actually working. Which action would provide the most reliable validation?
Select an answer first
13foundation · easy
A company must encrypt all traffic between clients and its web servers. Which F5 control is designed for this purpose?
Select an answer first
14foundation · easy
A retail company processes credit card transactions and must comply with PCI DSS. Which F5 capability is most directly required to meet PCI DSS logging requirements?
Select an answer first
15foundation · easy
A healthcare organization must protect electronic protected health information (ePHI) as required by HIPAA. Which F5 control is most directly aligned with this requirement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 401

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “401” is a trademark of its owner, used for identification only.